circuitodorock.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:e1:5a:af:50:f8:56:40:98:6e:81:52:d7:d3:ce:e4:7b:66 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=circuitodorock.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:5a:af:50:f8:56:40:98:6e:81:52:d7:d3:ce:e4:7b:66
Serial Number (int): 425133217098091073286757666797895670856550
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:97:a2:39:df:d2:c6:d9:40:01:5d:b0:7f:f9:2d:39:a2:05:11:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:59:41:7d:09:7b:c1:c6:08:09:b3:48:a5:86:24:75:c5:01:25:94
Fingerprint (sha256): 91:b1:8e:45:aa:be:95:c2:0d:9a:5d:8e:84:00:39:95:3e:50:52:b9:40:1a:dc:0f:86:95:44:20:7f:4b:15:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate circuitodorock.com.br

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for circuitodorock.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.circuitodorock.com.br
circuitodorock.com.br
programacao.circuitodorock.com.br
www.circuitodorock.com.br

Other certificates including the domain name circuitodorock.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for circuitodorock.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425133217098091073286757666797895670856550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 19:07:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 19:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'circuitodorock.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808928632859762580782509538762373879576835638473314969166137332992745813599758748150560166767852027081945705780859305285263053943961801429985382615382840612806974569241257383056188073897680408109639993459300531583958079299251060915817739667642751048833253281371898628822426148063399402975235623736433800804373904275814403831291645341947462648724215760734479518840597321522788859608517789111257582972818914197091417704056656442917461402315274489340744378149128298550160296183097745358997521943147209284345167431564496913085396188101585194101599147339809719059011411046028369023025275237377723551320669292728190909580648021203391153941884186859422488187880944144196254521859455072249969276697399114577903540667627256306396832266432202147586514159421322614269160234265454101225792941119117697595496997958029744390344594864808693708035723467286518354386847104902128099923680888453272086128338188508647510116340410747985687773139411292893937059421872663535194039863939766147043685206445915036685076568502275569284563469502431849009853689158563321969016682222707422346582494887041762743784521549284902511158073389084200740996315356105045093415771666712874144076295609486000036403691329941888393171063534190965949577177671130804795558725231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f297a239dfd2c6d940015db07ff92d39a20511f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.circuitodorock.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circuitodorock.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programacao.circuitodorock.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circuitodorock.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e05ed4be800000403004730450220367150cf1697f9c24061e3d13db46a2a2a0011151b79e0b6943d1af5bff1a1cc022100b1d483b9966d185fa1f65c2a35524a4d3f4c3cf75e796a7667fa417ed71736b6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e05ed4be50000040300473045022100c16a3e27e3422d203269c4b51d292cd7974d94365c543a223612f1b5467119ac022035ec3dfd03164f26a1160048fa7da071165f0155257dfb98b5b5c9ceeeeef854
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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